lockbox-env

Yandex Cloud Lockbox service one line config library

With this library you can load all Lockbox secrets directly to environment variables in runtime

Use

You need invoke config function from main project endpoint

require('lockbox-env').config({
    secrets: '', // string or array of string secret id for load, also can be specify by env variable (see below)
    saKeyFile: 'sa.json', // optional, service account json key file path, also can be specify by env variable (see below)
    iamToken: 'f1-T2dl94mf8sy5j...', // optional, iam auth token, also can be specify by env variable (see below)
    envPrefix: 'LOCKBOX', // optional, prefix for environment variables that loaded from secrets
    oneTimeRead: true, // optional, enable getter that clean variable from `process.env` after first read
    logger: pino(), // optional, override default library logger
    iamEndpoint, // optional, override Yandex Cloud IAM api endpoint
    lockboxEndpoint, // optional, override Yandex Cloud Lockbox api endpoint
    folderId: '', // optional, Yandex Cloud project folder-id for auto load secrets by main project name, also can be specify by env variable (see below)
}) // return promise

// also you can use sync version
require('lockbox-env').configSync(...)

Environment variable

| variable | description | | ---------------------------------------------- | ------------------------------------------------------------------- | | LOCKBOX_SERVICE_ACCOUNT_KEY_FILE_CREDENTIALS | specify .json service account key file for auth | | LOCKBOX_ACCESS_TOKEN_CREDENTIALS | specify iam-token directly (ex: from cloud function) for auth | | LOCKBOX_SECRET_ID | lockbox cloud secret-id for auto load secrets directly by secret-id | | LOCKBOX_FOLDER_ID | lockbox cloud folder-id for auto load secrets by main package name |

#lockbox #env #secret #security #credential